Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/RviOkLTyVLE6FoJ_UtOYtcPRBFs.roa
File: RviOkLTyVLE6FoJ_UtOYtcPRBFs.roa (raw, json)
Hash identifier: pOnBZ6sXFwQ3xM0dc3OovUGWe57ZITQKeBsIHpA3qdY=
Subject key identifier: 46:F8:8E:90:B4:F2:54:B1:3A:16:82:7F:52:D3:98:B5:C3:D1:04:5B
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0189F3F810BEB83327C69EE53820277BF630
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/RviOkLTyVLE6FoJ_UtOYtcPRBFs.roa
Signing time: Mon 14 Aug 2023 12:14:27 +0000
ROA not before: Mon 14 Aug 2023 12:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.81.28.0/22 maxlen: 24
45.146.232.0/23 maxlen: 23
188.64.104.0/22 maxlen: 24
188.64.108.0/22 maxlen: 24
45.141.170.0/23 maxlen: 23
45.141.168.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:f8:10:be:b8:33:27:c6:9e:e5:38:20:27:7b:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 14 12:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46f88e90b4f254b13a16827f52d398b5c3d1045b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:28:ed:b4:ba:81:ce:28:ce:e4:9b:41:14:b7:
17:6f:31:3f:8b:24:28:18:e4:3f:f0:e7:35:e0:3c:
d2:55:f1:90:87:42:b1:47:38:78:24:23:c4:10:7c:
56:b1:92:5b:75:f6:c4:e0:65:e7:2e:72:71:fa:94:
03:ff:e9:89:ff:fb:65:ba:72:6f:75:a8:c9:93:a4:
69:32:c9:3f:c6:a5:7a:d1:d7:56:d2:46:37:e0:9d:
bb:90:88:cb:ad:bb:04:17:4f:0b:f8:97:8f:a3:4f:
45:3a:9d:f5:0b:79:37:e1:04:a6:f5:36:5a:7d:1a:
4a:b7:c5:07:01:a4:3e:e5:63:03:38:82:e2:26:f7:
c1:31:0d:83:32:e4:77:aa:2f:f6:c3:c4:82:c5:0e:
e1:da:e6:47:93:5e:a9:06:f2:63:e3:f8:30:ca:f8:
f9:c2:48:a8:a6:23:a5:eb:c9:7d:13:21:c7:d8:d0:
32:4f:b6:3e:20:1e:af:e0:da:2f:b2:9e:6d:c1:54:
3f:3f:fb:4c:7a:b6:7a:31:b5:3d:bc:e7:6a:30:c0:
68:63:93:d7:01:3c:98:69:e5:da:95:31:66:e4:a4:
8a:33:57:f7:5f:29:1a:b6:ae:26:ab:09:f8:7b:9f:
59:a7:b3:f3:fe:cf:08:89:5e:c4:74:29:4b:f0:c4:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F8:8E:90:B4:F2:54:B1:3A:16:82:7F:52:D3:98:B5:C3:D1:04:5B
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/RviOkLTyVLE6FoJ_UtOYtcPRBFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/22
45.146.232.0/23
185.81.28.0/22
188.64.104.0/21
Signature Algorithm: sha256WithRSAEncryption
85:3e:e7:6f:98:62:43:41:98:39:06:ce:af:d2:09:a9:f4:23:
35:e5:6d:1e:ea:a6:41:b0:fc:15:59:a7:77:71:9d:94:3c:1d:
26:94:43:5e:c8:dc:38:52:6b:d3:d9:05:57:91:db:72:f2:41:
da:c4:04:26:c9:9b:e3:79:b4:0c:25:f6:ef:37:f5:ef:1e:d8:
6f:75:9d:9c:f5:86:9a:cb:98:27:1d:94:41:09:1e:e9:b1:66:
af:85:10:99:78:e0:91:10:f6:6b:65:66:c1:d0:20:e4:68:63:
df:fb:ea:8b:dd:47:da:2d:cc:ef:57:d0:b9:53:ec:1d:3b:b9:
0b:8b:d9:b2:30:2e:71:7a:96:67:6c:ab:3a:0d:fe:d7:06:54:
87:f2:b0:5f:e5:da:20:0f:31:9f:68:a9:77:13:18:0b:21:b4:
fa:78:8f:06:32:20:39:16:67:7f:6a:fa:9a:10:e3:43:93:65:
d6:26:4c:d8:c4:fa:d7:3d:6e:20:40:de:73:58:64:de:dc:c7:
09:be:01:2d:bc:b2:c7:36:33:f6:20:94:4c:52:b0:78:02:c9:
83:4c:0e:f6:be:aa:56:88:7b:b1:e6:44:85:76:42:9d:c8:54:
e3:27:e3:f6:bb:91:8c:e9:4c:ee:2b:a2:1a:f9:95:6c:f4:02:
0d:a3:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 17:06:27 2023 by rpki-client on console-ams.rpki-client.org